Synergistic|inForm

Terms of Service

Last updated: February 24, 2026

These Terms of Service ("Terms") govern your access to and use of inForm, a form submission backend operated by Synergistic ("we", "us", "our"). By creating an account or using the Service, you agree to these Terms.

1. The Service

inForm provides a hosted API for collecting, storing, and managing form submissions on behalf of your organization. The Service includes:

  • Form submission endpoints accessible via API keys
  • A dashboard for viewing submissions, managing forms, and configuring notifications
  • Email notifications to designated recipients and submitter confirmations
  • Multi-organization support with role-based membership and access control
  • Spam detection via honeypot fields

2. Accounts & Authentication

You sign in using Google OAuth. You are responsible for maintaining the security of your Google account. You must not share API keys with unauthorized parties. Each API key grants full submission access to the organization it belongs to.

3. Organizations & Membership

When you first sign in, an organization is created for you and you become its owner. Owners may invite members, assign roles (owner, admin, member), transfer ownership, and delete the organization. Deleting an organization permanently removes all associated forms, submissions, API keys, notification rules, and member access.

4. Data You Collect

You are responsible for the data collected through your forms. This may include personal information submitted by third parties (names, emails, phone numbers, messages, and any other fields your forms accept). You must:

  • Have a lawful basis for collecting the data submitted through your forms
  • Provide your own privacy notice to people submitting data through your forms
  • Not use the Service to collect sensitive categories of data (health, financial, government IDs) without appropriate safeguards
  • Comply with all applicable data protection laws (GDPR, CCPA, etc.) for the data you collect

5. Our Role as Data Processor

We store and process form submission data on your behalf. We act as a data processor (you are the data controller). We will not sell, share, or use submission data for any purpose other than providing the Service to you. We retain submission data until you delete it or delete your organization.

6. API Keys & Security

API keys authenticate form submissions to your organization. You are responsible for keeping your API keys secret. If a key is compromised, delete it immediately from the Settings page and generate a new one. We store only a hashed version of each key — we cannot recover a lost key.

7. Email Notifications

The Service sends emails on your behalf: admin notifications to recipients you designate, and optional confirmation emails to form submitters. You must only configure recipient addresses for people who have consented to receive these emails. We send emails from a Synergistic-operated domain using a third-party email provider (Resend).

8. Acceptable Use

You agree not to:

  • Use the Service to collect data for spam, phishing, or fraudulent purposes
  • Submit fabricated or malicious data to your own or others' form endpoints
  • Attempt to bypass rate limits or spam detection mechanisms
  • Use the Service in a way that violates any applicable law
  • Reverse-engineer, probe, or exploit the API beyond documented functionality

9. Rate Limits

Each form has a configurable rate limit (default: 5 submissions per period) to prevent abuse. We may impose additional rate limits or suspend access if we detect abnormal traffic patterns.

10. Availability & Liability

We provide the Service on an "as is" basis. We aim for high availability but do not guarantee uninterrupted access. We are not liable for lost submissions, notification delivery failures, or data loss beyond the limits permitted by law. Our total liability is limited to the fees you have paid us in the 12 months preceding the claim, if any.

11. Termination

You may stop using the Service at any time by deleting your organizations and signing out. We may suspend or terminate your access if you violate these Terms. Upon termination, your data will be deleted in accordance with our data retention practices.

12. Changes to These Terms

We may update these Terms from time to time. We will notify you of material changes by updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance.

13. Contact

Questions about these Terms? Contact us at hello@synergistic.io.